Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: wJEyAx5/LgRmlhwXZi5ZAXmLuRAWPSG4sfgsQfnSa7Q=
Subject key identifier: E3:8A:54:DE:1F:D1:AC:47:5C:3C:40:3C:BE:6F:EC:CA:64:46:A1:25
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0199FD33DF50EC3E0037A6B696BB7E6059E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0473
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: 06oC5zuXPqg2pUwaqsKN/rIEPDcUYvTHvPbSP+TR/yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:df:50:ec:3e:00:37:a6:b6:96:bb:7e:60:59:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=e38a54de1fd1ac475c3c403cbe6fecca6446a125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:2a:cd:fe:59:ae:e4:3a:55:b7:c0:1f:2f:
3e:74:a4:a4:bb:78:01:b7:72:13:83:a0:b3:9f:62:
5a:ea:90:e9:86:7a:93:cd:72:8f:e7:f3:58:d8:5f:
b4:91:91:60:10:bd:a7:64:a0:0b:b5:a5:c7:08:29:
f7:aa:92:bf:6f:1d:0f:00:94:2f:11:8f:98:10:89:
3b:34:d3:3e:d1:e4:5c:19:ab:95:a1:86:23:c6:72:
af:9c:41:38:f5:8e:cb:09:6d:5a:86:d1:a2:37:0a:
24:b7:fe:48:6c:52:11:48:b2:33:ea:fc:7e:02:27:
cc:bd:bb:55:45:22:f2:d4:aa:5d:24:3b:42:92:61:
dd:17:4e:c7:31:bb:1b:49:c5:85:c4:0b:14:39:24:
ac:57:9f:56:cc:3b:87:78:33:38:11:8d:94:5c:af:
37:21:e7:bf:8e:5f:53:d0:45:61:16:21:c5:31:1c:
34:39:b5:b5:08:12:90:da:f8:52:bd:ed:0b:72:97:
cb:7d:6f:83:74:18:39:53:50:d1:df:5e:33:89:93:
f3:98:28:fc:36:8a:39:54:f7:39:7b:16:ae:79:a2:
5b:80:92:73:59:21:fd:69:e1:8c:e0:a7:28:fc:a1:
1c:c5:a0:ca:96:ee:54:08:6a:6e:fd:18:b5:29:a0:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:54:DE:1F:D1:AC:47:5C:3C:40:3C:BE:6F:EC:CA:64:46:A1:25
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:17:4d:70:94:af:c4:03:76:7d:41:db:86:9b:e7:5e:47:01:
5d:55:ef:40:4c:66:4b:d5:fa:db:46:d7:12:15:37:5c:f3:3c:
1e:d0:58:22:d1:20:41:31:44:5e:75:87:fa:bc:41:d1:40:6b:
17:58:e4:50:b9:7b:ff:8c:d4:90:98:4d:21:37:13:3d:95:4a:
92:cd:fe:3c:f5:33:01:72:1c:0a:4d:f5:80:93:c4:0a:9f:9d:
20:1f:98:00:56:20:ce:73:68:5d:0d:52:01:db:eb:70:e5:10:
d7:e9:aa:67:a4:a8:d3:59:29:a5:62:f0:69:fb:c5:cb:0a:00:
a2:af:ae:cb:7a:c4:32:57:0c:12:ea:79:3e:f4:eb:54:ae:66:
1e:d3:12:f5:c2:d3:c2:5b:f0:a2:f9:98:4f:7a:b4:63:00:7e:
f5:9a:e9:4c:95:9e:e3:38:15:3c:9d:d6:57:be:83:82:d2:9f:
37:e8:24:be:2f:a7:09:33:c7:e1:23:3d:c5:6e:21:01:f6:ac:
80:37:07:8a:76:85:63:2a:a4:49:57:54:d7:f5:b0:95:d5:9d:
8d:6c:76:52:33:12:a4:e4:fb:64:72:f4:aa:31:42:c6:ce:7a:
0d:39:3a:97:eb:b3:8a:3a:e0:0f:ad:be:4c:9b:d7:59:c7:af:
6f:00:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:44 2025 by rpki-client